Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/gqEFreY4NMpjBXMlDuMhhvFwjzg.roa
File: gqEFreY4NMpjBXMlDuMhhvFwjzg.roa (raw, json)
Hash identifier: xJ+QtSfu9gBrJNFG0pXSbWrm8JQn9+93Ai37fHelC94=
Subject key identifier: 82:A1:05:AD:E6:38:34:CA:63:05:73:25:0E:E3:21:86:F1:70:8F:38
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 018C3940DB44B48326316D27AF4A0E66CDE8
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/gqEFreY4NMpjBXMlDuMhhvFwjzg.roa
Signing time: Tue 05 Dec 2023 09:13:20 +0000
ROA not before: Tue 05 Dec 2023 09:13:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198422
IP address blocks: 194.147.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:40:db:44:b4:83:26:31:6d:27:af:4a:0e:66:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Dec 5 09:13:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82a105ade63834ca630573250ee32186f1708f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:44:82:25:53:e5:2f:35:0b:95:78:5a:b3:a8:
2f:20:7f:3d:5a:f3:cd:00:4d:47:55:1f:b3:1e:ca:
ab:3d:68:74:73:e7:cf:a6:21:9a:04:b7:61:0f:09:
92:a3:f4:f8:e0:ae:61:fa:ee:b8:4a:1a:8f:1b:b8:
d0:35:a8:89:34:14:ca:5a:8a:f5:ae:43:75:42:fa:
7e:30:b4:20:b7:f4:ff:ad:c4:c1:bb:e9:0c:3b:14:
6d:15:a9:38:89:8e:00:a0:73:3f:3d:e2:6f:d3:c0:
57:bc:2c:7f:2b:c5:a0:6d:bd:c9:23:6c:09:4a:c6:
11:d0:aa:5f:43:b4:e6:b6:d3:86:fc:49:52:dd:7e:
2a:eb:59:36:16:4c:a0:9a:55:88:08:75:4f:a7:8f:
42:14:23:ea:a8:20:e0:5a:a7:16:ef:e7:eb:e3:6a:
e2:c3:81:52:51:23:f1:1f:f4:47:c2:d4:91:e3:99:
8f:d3:90:71:7f:f6:1c:04:fc:9d:04:a7:ce:7d:7f:
a5:ad:0f:68:87:a5:ed:aa:89:a8:17:4b:fb:ac:37:
af:7f:3e:2c:97:70:8f:42:4d:84:3c:77:f3:8c:0c:
a8:99:ce:01:1d:f6:f7:c1:dd:f2:ca:10:b2:9d:3b:
d0:79:48:e3:4b:c8:e3:19:5e:cf:13:d3:b6:0a:9b:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A1:05:AD:E6:38:34:CA:63:05:73:25:0E:E3:21:86:F1:70:8F:38
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/gqEFreY4NMpjBXMlDuMhhvFwjzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.75.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a2:50:46:ea:5c:be:88:49:70:45:c2:0d:af:ac:fc:8e:67:
76:dd:f7:b8:fd:bb:3f:a9:01:b8:ac:80:38:82:c2:b5:c1:6a:
23:24:12:e4:9e:1b:40:ed:38:12:24:4f:49:f1:97:fa:4c:ca:
51:cd:37:27:b1:54:72:d4:55:c7:f5:7d:a1:1b:a4:e0:dd:e1:
63:21:cf:dd:ed:0c:4f:a3:c9:36:6d:21:af:45:a0:2a:b6:c1:
4b:47:a2:0e:9c:a1:cc:cd:11:ac:6b:3b:52:69:22:73:2d:b2:
d0:a0:72:77:4c:6a:66:f6:35:be:78:75:1f:ea:cb:b8:8e:d4:
a7:4d:a4:4d:6f:ca:e0:f3:29:85:92:1a:2d:1f:54:7f:3d:b6:
b1:18:8c:16:49:7e:f2:9b:6b:d5:d9:a7:44:21:61:2d:1a:0b:
9a:62:61:3d:d2:37:8c:77:59:e6:7f:3c:65:4e:26:eb:f3:75:
55:82:13:8b:34:d0:0a:75:6c:18:3b:24:e3:8a:2f:67:12:46:
c2:d3:31:7e:8d:82:b1:e9:e5:30:80:41:3c:e8:0b:3d:b7:39:
fc:6f:bb:c0:51:54:75:8e:35:15:d4:72:4a:81:84:62:79:55:
31:34:55:f5:c6:fb:27:0a:86:6b:6a:40:83:a8:36:a6:9d:8f:
46:79:a1:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw5QNtEtIMmMW0nr0oOZs3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjMxMjA1MDkxMzIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmExMDVhZGU2MzgzNGNhNjMwNTczMjUwZWUzMjE4NmYxNzA4ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0SCJVPlLzULlXhas6gvIH89WvPN
AE1HVR+zHsqrPWh0c+fPpiGaBLdhDwmSo/T44K5h+u64ShqPG7jQNaiJNBTKWor1
rkN1Qvp+MLQgt/T/rcTBu+kMOxRtFak4iY4AoHM/PeJv08BXvCx/K8Wgbb3JI2wJ
SsYR0KpfQ7TmttOG/ElS3X4q61k2FkygmlWICHVPp49CFCPqqCDgWqcW7+fr42ri
w4FSUSPxH/RHwtSR45mP05Bxf/YcBPydBKfOfX+lrQ9oh6XtqomoF0v7rDevfz4s
l3CPQk2EPHfzjAyomc4BHfb3wd3yyhCynTvQeUjjS8jjGV7PE9O2Cpv94QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIKhBa3mODTKYwVzJQ7jIYbxcI84MB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvZ3FFRnJlWTROTXBqQlhNbER1TWhodkZ3anpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNLMA0G
CSqGSIb3DQEBCwUAA4IBAQA9olBG6ly+iElwRcINr6z8jmd23fe4/bs/qQG4rIA4
gsK1wWojJBLknhtA7TgSJE9J8Zf6TMpRzTcnsVRy1FXH9X2hG6Tg3eFjIc/d7QxP
o8k2bSGvRaAqtsFLR6IOnKHMzRGsaztSaSJzLbLQoHJ3TGpm9jW+eHUf6su4jtSn
TaRNb8rg8ymFkhotH1R/PbaxGIwWSX7ym2vV2adEIWEtGguaYmE90jeMd1nmfzxl
Tibr83VVghOLNNAKdWwYOyTjii9nEkbC0zF+jYKx6eUwgEE86As9tzn8b7vAUVR1
jjUV1HJKgYRieVUxNFX1xvsnCoZrakCDqDamnY9GeaGr
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:49 2024 by rpki-client on console-fra.rpki-client.org